Hello Srivatsa Ramakrishna,
Greetings! Thanks for raising this question in the Q&A forum.
The 429 responses you are seeing from the de-identification service are expected throttling behavior, not an error condition or misconfiguration. The de-identification service enforces a fixed rate limit at the data plane: requests are throttled if you exceed 1 MB per 5 seconds or 100 requests per 5 seconds. This limit applies per de-identification service instance and is not currently adjustable from the Azure Portal, which is why you are hitting it under sustained load.
Here is how to work through it:
Confirm you are actually hitting the documented threshold Check your request pattern against the two limits: total payload size per 5-second window and total request count per 5-second window. Requests can't exceed 50 KB, jobs can process no more than 10,000 documents, and each document processed by a job can't exceed 2 MB. If your workload sends many small synchronous requests rather than batching into a job, you will hit the request-count limit well before any data-size limit.
Switch high-volume workloads to the asynchronous job API where possible If you are calling the synchronous de-identify endpoint per document, batching documents into a single job submission (tag, redact, or surrogate) from Blob Storage reduces the number of individual requests counted against the 5-second window, since the job runs as one submission rather than hundreds of discrete calls.
Implement retry with backoff honoring the throttling response On a 429, back off and retry rather than immediately resubmitting, since immediate retries only add more requests to the same 5-second window and prolong the throttling.
Request a capacity increase through Azure Support Since this limit is fixed at the service level and not self-service adjustable, if your use case requires higher throughput, you need to submit a support request for consideration. Go to Help + support > New support request, set Issue type to Technical, Service to Azure Health Data Services, and in the problem description specify:
- The exact throughput you need (MB per 5 seconds and/or requests per 5 seconds)
- Your current de-identification service resource name and region
- A brief description of your workload pattern (synchronous calls vs job-based)
Since your support plan wasn't specified, note that a Technical ticket requires at least Developer-tier paid support; if you are on Basic support only, you can still open a Subscription Management request referencing this same capacity need, which routes to the product team for review at no cost.
If this answer helps you kindly accept the answer which will help others who have similar questions.
Best Regards,
Jerald Felix.